An RSA-based time-bound hierarchical key assignment scheme for electronic article subscription

ABSTRACT

The time-bound hierarchical key assignment problem is to assign time sensitive keys to security classes in a partially ordered hierarchy so that legal data accesses among classes can be enforced. Two time-bound hierarchical key assignment schemes have been proposed in the literature, but both of them were proved insecure against collusive attacks. In this paper, we will propose an RSA-based time-bound hierarchical key assignment scheme and describe its possible application. The security analysis shows that the new scheme is safe against the collusive attacks.

REFERENCES

• 1: Selim G. Akl , Peter D. Taylor, Cryptographic solution to a problem of access control in a hierarchy, ACM Transactions on Computer Systems (TOCS), v.1 n.3, p.239-248, August 1983 [doi>10.1145/357369.357372]
• 2: Hung-Yu Chien, Efficient Time-Bound Hierarchical Key Assignment Scheme, IEEE Transactions on Knowledge and Data Engineering, v.16 n.10, p.1301-1304, October 2004 [doi>10.1109/TKDE.2004.59]
• 3: H. Chien and J. Jan. New hierarchical assignment without public key cryptography. Computers & Security, 22:523--526, 2003.
• 4: L. Harn , H.-Y. Lin, A cryptographic key generation scheme for multilevel data security, Computers and Security, v.9 n.6, p.539-546, Oct. 1990 [doi>10.1016/0167-4048(90)90132-D]
• 5: Ravinderpal S. Sandhu, Cryptographic implementation of a tree hierarchy for access control, Information Processing Letters, v.27 n.2, p.95-98, February 29, 1988 [doi>10.1016/0020-0190(88)90099-3]
• 6: A. Santis, A. Ferrara, and B. Masucci. On the insecurity of a time-bound hierarchical key assignment scheme. Tech. Report, Dept. of Math., University of Waterloo, cacr2005-07.ps, 2005.
• 7: W. G. Tzeng, A Time-Bound Cryptographic Key Assignment Scheme for Access Control in a Hierarchy, IEEE Transactions on Knowledge and Data Engineering, v.14 n.1, p.182-188, January 2002 [doi>10.1109/69.979981]
• 8: J. Yeh, R. Chow, and R. Newman. A key assignment for enforcing access control policy exceptions. In International Sympo. on Internet Technology, pages 54--59, 1998.
• 9: X. Yi and Y. Ye. Security of tzeng's time-bound cryptographic key assignment scheme for access control in a hierarchy. IEEE Trans. on Knowledge & Data Engineering, 15:1054--1055, 2003.

INDEX TERMS

Primary Classification:
  E. Data
  E.3 DATA ENCRYPTION

General Terms:
Security

Keywords:
access control, key assignment